
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bafe3d33-7aa1-3cdc-bdfc-0f08e6ca6c60.roa
File: bafe3d33-7aa1-3cdc-bdfc-0f08e6ca6c60.roa (raw, json)
Hash identifier: 42qZOzqcCAGUgybIM8w5EaMISC58/kczueCxAPjt5/4=
Subject key identifier: 90:CF:A8:E2:CC:4B:ED:AF:26:27:C3:F9:C2:1F:0B:D9:01:ED:A9:35
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584CDC67E5E6DA6DD2B05EE37908
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bafe3d33-7aa1-3cdc-bdfc-0f08e6ca6c60.roa
Signing time: Sat 14 Feb 2026 14:00:41 +0000
ROA not before: Sat 14 Feb 2026 14:00:41 +0000
ROA not after: Fri 15 May 2026 13:00:41 +0000
asID: 22773
IP address blocks: 24.251.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:dc:67:e5:e6:da:6d:d2:b0:5e:e3:79:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Feb 14 14:00:41 2026 GMT
Not After : May 15 13:00:41 2026 GMT
Subject: CN=004d8556-928d-4bfa-833d-c845f8444474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:16:b6:a1:0d:5e:f2:89:f3:cf:33:f5:a9:7b:
76:87:15:c0:9f:e1:37:18:83:8c:d3:c2:0f:2f:e8:
fb:8c:f1:9f:10:c2:63:27:2c:3e:e0:d3:a0:28:4d:
fb:c5:0e:df:3b:0b:0b:28:14:91:2d:cb:fc:97:b7:
18:32:7e:01:96:1f:6c:31:9e:c6:7a:ae:ba:df:a6:
b5:b9:56:d2:3c:ef:0d:9a:0a:ee:ea:e0:a4:86:e6:
f0:9b:e3:51:e5:c5:9f:ec:3e:2a:92:78:64:29:3a:
b1:e8:23:ae:57:f3:ae:b3:67:d9:3a:69:02:88:0b:
9d:b1:9b:de:69:4f:aa:5e:2a:c4:12:e6:0b:04:54:
5e:f6:e6:15:53:f1:5a:da:c3:d7:e4:48:46:c5:fe:
2c:3b:41:d8:f6:ec:a0:dd:c4:45:ac:c5:50:dd:ee:
93:ce:ac:ff:c0:34:59:cc:ea:a0:78:97:13:36:97:
f3:99:0a:a5:ff:66:8f:ac:4a:f3:d6:c9:82:0d:94:
8a:ce:0c:56:90:24:8d:b5:59:89:8a:e6:bb:37:56:
66:84:f8:a6:fc:bc:0e:40:db:b3:c3:ae:09:6b:64:
83:e8:b6:ff:7c:fd:e0:d0:20:05:e9:7c:83:22:a7:
b0:1a:d3:48:2c:b6:aa:25:25:ee:8c:ef:b9:48:b6:
7e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CF:A8:E2:CC:4B:ED:AF:26:27:C3:F9:C2:1F:0B:D9:01:ED:A9:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bafe3d33-7aa1-3cdc-bdfc-0f08e6ca6c60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
24.251.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:1c:29:f7:9b:f3:2b:8f:52:fd:9a:10:0a:1f:c2:af:a0:e1:
29:2e:23:a1:42:10:b9:1e:94:aa:e6:f5:7e:db:cd:24:e6:4d:
3e:33:c9:a3:14:bc:47:8e:da:96:c6:00:08:38:d9:ad:89:f7:
2c:be:5f:d8:2a:1c:c6:f8:97:65:11:43:96:b2:36:3f:67:da:
95:dc:4f:18:fd:48:db:af:16:6f:1e:c8:99:d4:ed:49:d3:2d:
21:b4:56:b2:b7:57:24:45:17:8c:df:5d:80:d1:91:30:4b:b5:
b7:79:04:d5:9e:49:df:15:32:aa:72:eb:1b:10:d7:f0:d3:7b:
4c:dc:d1:0b:98:57:55:f6:d2:37:ed:bc:4f:46:6e:68:76:00:
45:a8:69:f2:31:12:3b:41:ca:64:b9:21:c4:9a:43:e2:03:01:
b9:44:08:8f:1d:3d:0a:8b:54:b1:8f:2e:e7:c6:21:26:7b:94:
0e:4d:69:e5:05:51:2d:82:27:79:25:97:22:c8:9a:25:b4:13:
4b:4c:e7:3b:07:ed:b7:20:51:34:d5:2b:6e:ae:e0:8a:83:bf:
a6:78:86:2a:ad:56:55:1f:a7:a6:4d:26:7f:64:e3:70:70:c5:
32:ea:79:a6:b4:40:3f:cc:df:a3:69:97:8c:bc:c8:da:a3:77:
73:31:23:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:13:20 2026 by rpki-client